kishvandnews[.]ir

PhishDestroy has identified kishvandnews.ir as a generic phishing domain currently offline but posing a significant threat. This domain impersonates a legitimate news website under the name پایگاه خبری تحلیلی کیشوند نیوز, attempting to deceive visitors into providing sensitive information. The domain was taken offline after being flagged by multiple security sources, but its history suggests it was actively used for phishing attacks.

Technical analysis reveals that kishvandnews.ir was flagged by 13 out of 95 security vendors on VirusTotal, indicating broad recognition as malicious. The domain resolves to IP address 213.239.217.74 and uses an SSL certificate issued by Let's Encrypt (R13). It appeared on 2 security blocklists and was found in 31 threat intelligence pulses on AlienVault OTX, underscoring its widespread tracking by the security community. Despite being offline, the domain's infrastructure remains a risk if reactivated.

As the domain is currently offline, immediate direct threat is mitigated, but users should remain vigilant. PhishDestroy recommends avoiding any interaction with kishvandnews.ir or related links. If you have previously visited the site, monitor your accounts for suspicious activity and change passwords. Always verify the authenticity of news sites by checking official sources and using PhishDestroy's verification tools before engaging with unknown domains.